About HermanEdwards

Settings I believe adding/updating an Audit comment of a Policy rule is independent from making changes to the policies. Operational command: Audit comment Update (type='op')   set audit-comment comment "paul manual edit" xpath​   Configuration command: Making changes to a Policy rule (type='config')   '/api/?type=config&action=get&xpath=/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='paul']/pre-rulebase/security/rules/entry[@name='paul-feb-24']'​       Questions From Panorama -> Management tab With enabled "Require audit comment on policies", I keep getting this Error message:   OrderedDict([('response', OrderedDict([('@status', 'success'), ('@code', '13'), ('msg', \"Audit comments are missing for policy configuration being committed. Please add audit comments and try again.\\nList of xpaths:\\n/config/devices/entry/device-group/entry[@name='paul']/pre-rulebase/security/rules/entry[@name='paul-audit-comment-create-feb-24']\\n/config/devices/entry/device-group/entry[@name='paul']/pre-rulebase/security/rules/entry[@name='paul-feb-24']\")]))]) "     Seeing that adding comments and making changes to a Policy rule requires 2 independent API calls, how can we make change both changes in one API call? I believe we just need to do 2 requests: (1) Update Audit comment => (2) Update Policy rule => (3) Commit Despite manually set the Audit comment of a rule to some texts, the Commit operation is still failing with the error message. Has anyone run into this before? Am I doing the updates properly? It's worth noting that I can manually commit via Web Browser though. It looks like committing via Web browser does not care about the Audit comment at all. I tried committing without any comment, and it still passes... Attempts Manually update the Audit comment of the Policy rule before committing,  Commit API calls will still fail with the error message I post above.     Any help is greatly appreciated.   ... View more

Scenario: While reading the 10.1 Guide and XML API guide, I see: Case1: actions where " localhost.localdomain" is included as the Device entry name in the xpath (e.g. "/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='paul']") Case2: actions where the entry name is ignored completely (e.g. "/config/devices/entry/vsys/entry[@name='vsys1']") See how there is no [@name=<entry_name>] for " devices/entry" You can find more examples in this page https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-panorama-api/pan-os-xml-api-request-types/configuration-api/set-configuration.html Questions: When do we need to specify the name of the device entry? (e.g.  'localhost.localdomain') Is this value consistent across all Panorama versions? By leaving it blank, does the value default to something? I don't think this is the case, as xpath should represent a path to an object. I tried leaving the Device entry name as blank when doing Operation mode (see example), the update is successful. However, the update is applied to the wrong path, resulting in no effect on Panoroma UI.   Your help is much appreciated. ... View more

Settings Panorama version: 10.1 (latest) When creating/updating a Security Policy rule (see attached images for more info), I'm able to add/update Audit comment for a rule via Web browser by following this guide https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/policies/audit-comment-archi... . However, I fail to use XML API to simulate the same behaviours. On Panorama XML API request, there is no option to get/set the field "audit-comment". I followed this guide  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-panorama-api/get-started-with-the-pan-os-xml-api... to explore all fields for a given Policy rule. There is no "comment" or "audit-comment" field.   What's expected: Similar to how we can edit/read the Description field of a Security Policy rule, we should be able to edit/read the Audit comment field of a rule as well. I believe we should have xpath like " /config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='paul']/pre-rulebase/security/rules/entry[@name='paul-feb-24']/audit-comment" to read or update here.     What's happening: From viewing Chrome's network tab (see attached), you can see that we should be able to access "audit-comment" for a Policy rule. However, I cannot access that field via XML API browser or manually calling it via curl. Could you tell me if this is something possible on Panorama? If yes, How do I access this Audit Comment field? If yes, Is this feature available from Panorama 8.0 as well?       Your help is much appreciated. ... View more